$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232372e302f32342d3234203d3e203633363431.roa File: 3132332e34392e3232372e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: pZrkim62de/CCEMgsjarT8FaPeZwY18Z4uql5Rbdidc= Subject key identifier: 75:DE:26:83:44:A6:07:0B:93:CF:3B:88:9E:2C:50:22:B5:77:70:A5 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 16AAB299BCD5C021D983BC24BEFDA323D92A1F4A Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232372e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:07:21 +0000 ROA not before: Wed 22 Apr 2026 14:02:21 +0000 ROA not after: Wed 21 Apr 2027 14:07:21 +0000 asID: 63641 IP address blocks: 123.49.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:aa:b2:99:bc:d5:c0:21:d9:83:bc:24:be:fd:a3:23:d9:2a:1f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:02:21 2026 GMT Not After : Apr 21 14:07:21 2027 GMT Subject: CN=75DE268344A6070B93CF3B889E2C5022B57770A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:01:95:f4:48:17:c3:31:dd:df:93:cc:a9: 36:88:fc:0b:7b:99:83:c0:58:d3:99:b5:41:79:1f: 11:d0:28:b0:a5:12:da:8f:33:4c:5f:78:79:f3:2f: b8:32:6b:bd:c8:36:d2:19:07:02:9d:29:26:b8:a3: 29:67:72:55:c3:22:ba:90:a2:80:37:29:56:e8:66: ca:27:b9:9e:86:06:16:59:b2:cf:65:43:ad:8a:13: 68:48:1b:4c:25:38:19:28:48:9f:70:5f:0a:be:38: f4:9e:9e:31:dc:67:f6:28:6f:b2:0c:ff:50:c3:0b: 12:97:13:0a:5a:8d:62:d4:08:49:b7:06:7f:46:d9: 59:92:c2:bc:ea:1b:17:62:a8:30:b5:e1:dc:8c:ec: 8d:11:fb:7a:ea:71:4f:67:82:b2:d8:33:1d:12:cc: 22:0e:6f:f2:0d:bb:38:83:00:25:31:dd:4a:a6:93: b3:e7:7d:f2:77:85:79:93:7f:8d:43:f9:b1:28:d3: ee:3f:37:60:2e:ae:0d:35:91:6d:59:72:6c:45:d5: 0e:03:86:c3:fc:71:57:84:4c:5f:ec:24:7a:1a:d0: 15:7e:c1:53:7e:eb:6c:fb:91:7a:e6:2c:55:d1:d2: 7c:a3:21:22:e5:f5:fe:f4:7c:5f:ce:41:fc:71:b6: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:DE:26:83:44:A6:07:0B:93:CF:3B:88:9E:2C:50:22:B5:77:70:A5 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3132332e34392e3232372e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.49.227.0/24 Signature Algorithm: sha256WithRSAEncryption 09:57:9b:8e:23:c9:2f:fc:db:89:55:3b:bb:24:4c:8a:68:ed: 4f:86:94:be:47:42:0c:c2:65:39:ff:80:4a:e5:50:85:33:fc: 56:8a:21:4e:7c:cf:1e:6c:7e:76:d8:55:8b:86:6c:1c:2a:91: b9:c8:d9:f9:b4:1d:55:95:d4:30:ed:f8:6e:bc:2f:e6:3f:c6: 53:86:5c:e5:be:09:eb:11:a2:45:ae:1d:bb:ff:97:14:7e:b6: ab:66:ba:9b:31:6b:cf:84:17:ad:22:de:92:0f:d4:98:61:07: 9a:c0:2c:d3:7b:da:67:b7:f5:a4:93:b8:ef:b1:6c:d9:91:73: 9c:9f:ad:e4:1c:47:7f:ba:4b:de:6c:c1:50:3a:ed:c7:f4:f5: 44:a1:0b:ef:90:c2:c9:69:60:a0:af:d5:6a:bc:3d:a1:19:7c: d8:a5:eb:c1:e6:e4:b5:d6:e9:56:e5:74:1e:2d:1b:37:a4:eb: 73:0e:a4:91:86:e9:c4:73:a3:0c:7c:e6:4a:b3:a9:ec:ad:9f: b7:4f:23:92:ab:bc:b8:73:49:78:f9:de:e2:ba:21:7f:59:5d: 26:d5:58:05:8c:c1:de:4c:c9:7c:8d:9c:cc:04:3c:aa:34:d5: b9:44:ac:24:b1:54:a5:79:a2:05:5b:05:87:09:58:aa:21:02: 16:ca:7b:0b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFqqymbzVwCHZg7wkvv2jI9kqH0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDAyMjFaFw0yNzA0MjExNDA3MjFaMDMxMTAvBgNV BAMTKDc1REUyNjgzNDRBNjA3MEI5M0NGM0I4ODlFMkM1MDIyQjU3NzcwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8owGV9EgXwzHd35PMqTaI/At7 mYPAWNOZtUF5HxHQKLClEtqPM0xfeHnzL7gya73INtIZBwKdKSa4oylnclXDIrqQ ooA3KVboZsonuZ6GBhZZss9lQ62KE2hIG0wlOBkoSJ9wXwq+OPSenjHcZ/Yob7IM /1DDCxKXEwpajWLUCEm3Bn9G2VmSwrzqGxdiqDC14dyM7I0R+3rqcU9ngrLYMx0S zCIOb/INuziDACUx3Uqmk7PnffJ3hXmTf41D+bEo0+4/N2Aurg01kW1ZcmxF1Q4D hsP8cVeETF/sJHoa0BV+wVN+62z7kXrmLFXR0nyjISLl9f70fF/OQfxxtgKzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUdd4mg0SmBwuTzzuInixQIrV3cKUwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzIzMzJlMzQz OTJlMzIzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHsx4zANBgkqhkiG9w0BAQsFAAOCAQEACVebjiPJL/zbiVU7uyRMimjt T4aUvkdCDMJlOf+ASuVQhTP8VoohTnzPHmx+dthVi4ZsHCqRucjZ+bQdVZXUMO34 brwv5j/GU4Zc5b4J6xGiRa4du/+XFH62q2a6mzFrz4QXrSLekg/UmGEHmsAs03va Z7f1pJO477Fs2ZFznJ+t5BxHf7pL3mzBUDrtx/T1RKEL75DCyWlgoK/Varw9oRl8 2KXrwebktdbpVuV0Hi0bN6Trcw6kkYbpxHOjDHzmSrOp7K2ft08jkqu8uHNJePne 4rohf1ldJtVYBYzB3kzJfI2czAQ8qjTVuUSsJLFUpXmiBVsFhwlYqiECFsp7Cw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:44 2026 by rpki-client